CVE-2019-14981
ImageMagick: division by zero in MeanShiftImage in MagickCore/feature.c
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
In ImageMagick 7.x before 7.0.8-41 and 6.x before 6.9.10-41, there is a divide-by-zero vulnerability in the MeanShiftImage function. It allows an attacker to cause a denial of service by sending a crafted file.
En ImageMagick versiones 7.x anteriores a 7.0.8-41 y versiones 6.x anteriores a 6.9.10-41, hay una vulnerabilidad de división por cero en la función MeanShiftImage. Permite a un atacante causar una denegación de servicio mediante el envío de un archivo especialmente diseñado.
An update that fixes 11 vulnerabilities is now available. This update for ImageMagick fixes the following issues. Fixed a denial-of-service vulnerability in ReadXWDImage. Fixed a use-after-free bug in the Matlab image parser. Fixed a divide-by-zero vulnerability in the MeanShiftImage function. Fixed an application crash resulting from a heap-based buffer over-read in WriteTIFFImage. Fixed a use after free in the UnmapBlob function. Fixed a memory leak in magick/xwindow.c. Fixed a memory leak in coders/dps.c. Fixed a memory leak in coders/dot.c. Fixed a memory leak in Huffman2DEncodeImage in coders/ps2.c. Fixed a memory leak in Huffman2DEncodeImage in coders/ps3.c. Fixed a memory leak in coders/dot.c. This update was imported from the SUSE:SLE-15:Update update project.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2019-08-12 CVE Reserved
- 2019-08-12 CVE Published
- 2024-08-05 CVE Updated
- 2025-04-28 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-369: Divide By Zero
CAPEC
References (11)
| URL | Tag | Source |
|---|---|---|
| https://lists.debian.org/debian-lts-announce/2019/10/msg00028.html | Mailing List |
|
| https://lists.debian.org/debian-lts-announce/2020/08/msg00030.html | Mailing List |
|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00040.html | 2020-08-19 | |
| http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00042.html | 2020-08-19 | |
| https://usn.ubuntu.com/4192-1 | 2020-08-19 | |
| https://www.debian.org/security/2020/dsa-4712 | 2020-08-19 | |
| https://access.redhat.com/security/cve/CVE-2019-14981 | 2020-03-31 | |
| https://bugzilla.redhat.com/show_bug.cgi?id=1757911 | 2020-03-31 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Imagemagick Search vendor "Imagemagick" | Imagemagick Search vendor "Imagemagick" for product "Imagemagick" | >= 6.0 < 6.9.10-41 Search vendor "Imagemagick" for product "Imagemagick" and version " >= 6.0 < 6.9.10-41" | - |
Affected
| ||||||
| Imagemagick Search vendor "Imagemagick" | Imagemagick Search vendor "Imagemagick" for product "Imagemagick" | >= 7.0.0-0 < 7.0.8-41 Search vendor "Imagemagick" for product "Imagemagick" and version " >= 7.0.0-0 < 7.0.8-41" | - |
Affected
| ||||||
| Debian Search vendor "Debian" | Debian Linux Search vendor "Debian" for product "Debian Linux" | 8.0 Search vendor "Debian" for product "Debian Linux" and version "8.0" | - |
Affected
| ||||||
| Debian Search vendor "Debian" | Debian Linux Search vendor "Debian" for product "Debian Linux" | 9.0 Search vendor "Debian" for product "Debian Linux" and version "9.0" | - |
Affected
| ||||||
| Debian Search vendor "Debian" | Debian Linux Search vendor "Debian" for product "Debian Linux" | 10.0 Search vendor "Debian" for product "Debian Linux" and version "10.0" | - |
Affected
| ||||||
| Canonical Search vendor "Canonical" | Ubuntu Linux Search vendor "Canonical" for product "Ubuntu Linux" | 16.04 Search vendor "Canonical" for product "Ubuntu Linux" and version "16.04" | lts |
Affected
| ||||||
| Canonical Search vendor "Canonical" | Ubuntu Linux Search vendor "Canonical" for product "Ubuntu Linux" | 18.04 Search vendor "Canonical" for product "Ubuntu Linux" and version "18.04" | lts |
Affected
| ||||||
| Canonical Search vendor "Canonical" | Ubuntu Linux Search vendor "Canonical" for product "Ubuntu Linux" | 19.04 Search vendor "Canonical" for product "Ubuntu Linux" and version "19.04" | - |
Affected
| ||||||
| Canonical Search vendor "Canonical" | Ubuntu Linux Search vendor "Canonical" for product "Ubuntu Linux" | 19.10 Search vendor "Canonical" for product "Ubuntu Linux" and version "19.10" | - |
Affected
| ||||||
| Opensuse Search vendor "Opensuse" | Leap Search vendor "Opensuse" for product "Leap" | 15.0 Search vendor "Opensuse" for product "Leap" and version "15.0" | - |
Affected
| ||||||
| Opensuse Search vendor "Opensuse" | Leap Search vendor "Opensuse" for product "Leap" | 15.1 Search vendor "Opensuse" for product "Leap" and version "15.1" | - |
Affected
| ||||||